Reference
Authentication & billing
Same account as the app. Email and password in the agent environment. Login returns a short-lived session token. Pass it on later tool calls. Fund the meter in the app. Approve on the app spends it. API keys later.
Account
A human registers at the app. Agents do not self-register. There is no MCP-only user. The email you create is the login the agent uses from env.
- One account owns the portal and MCP.
- Jobs the agent prepares show on the app for you to review.
- You do not get a second meter or a second queue.
Register first if you do not have an account. Get started. Operator steps: Getting started.
Prepaid meter
The meter is prepaid balance on the account. You fund it in the app. Portal jobs and agent jobs spend the same meter. There is no MCP-only purse.
- Fund in the app. Agents do not run card deposits.
- Approve on the app debits the same meter as the portal.
Production mail is not free. We do not publish unit prices on www. Paper, envelope, and postage are on the job you approve. What is included →
Login does not spend. Proof does not spend. Persist does not spend. Approve on the app is the debit that starts production. The debit is the job you approved. It is not a monthly subscription.
MCP auth (now)
This is not an API key. After login you get a short-lived session token. Minutes, then refresh or log in again. The token is a session, not a long-lived secret.
- Call the MCP login tool with the account email and password. Ask it to return the token.
- Pass that token on every later mail tool. On auth failure, log in again.
- Never put the password in the prompt or a public repo.
Put credentials in env. The agent reads env and calls login. If a later tool returns an auth error, the token died or was omitted. Log in again. Pass the new token.
Do not invent hostnames or add commands. Connection details come with access on the app. Live tool names come from the MCP server after login. Tools reference stays in English.
Roadmap
Standalone API keys are planned. They are not the path now. Do not invent endpoints. When keys exist, they mint the same kind of short session token. The meter stays the meter. A human still approves on the app.
| Phase | Auth | Billing |
|---|---|---|
| Now | Human account. Login → session token on each tool | Prepaid meter funded in the app |
| Later (planned) | Revocable agent API keys that mint those session tokens | Same meter; crypto funding when it exists |
The later row is a direction, not a date. Do not build against a key you were not issued.
Insufficient balance
If the meter cannot cover the job, production does not start. The job stays a draft. There is no silent overdraft. There is no invoice-after-print for that debit.
Fund the meter in the app. Then approve. Empty meter is a production stop, not always a login stop. The agent can still prepare. You still have to cover the job before we print, insert, apply postage, and deliver the pieces to USPS.
Read meter balance from the tools the server lists after login. Do not guess a cost from www. We do not publish a public price list.
Security
- A human approves production mail, including Certified
- Recipient data is production mail data — handle under your policies
Password-protected accounts. We will not ask for your password in an unsolicited call or email. Sign out on a shared computer. MCP is account-tied. No anonymous mailing.
Lists and documents exist to produce the mail you approve. Treat them as production data. Do not paste recipient files into a public prompt. Full account practices: Security.
Certified Mail is proof when you select it. Add it before you approve. Not for postcards. Never same-day. Certified Mail →
FAQ
Is MCP auth an API key now?
No. After login you get a short-lived session token. Pass it on later tool calls. Standalone API keys are planned later. They are not the path now.
What happens if the meter cannot cover the job?
Insufficient balance blocks production. There is no silent overdraft. Fund the meter in the app, then approve. Production mail is not free.
Do agents run card deposits?
No. A human funds the prepaid meter in the app. Agents do not run card deposits. Approve on the app debits the same meter as the portal.
Questions about billing?
MCP is available now on the app. Account + prepaid meter.